[Jun 08, 2023] Get Latest and 100% Accurate PCNSA Exam Questions [Q165-Q187]

NEW QUESTION 165
The firewall sends employees an application block page when they try to access Youtube.
Which Security policy rule is blocking the youtube application?

intrazone-default

Deny Google

allowed-security services

interzone-default

NEW QUESTION 166
An administrator configured a Security policy rule with an Antivirus Security profile. The administrator did not change the action (or the profile. If a virus gets detected, how wilt the firewall handle the traffic?

It allows the traffic because the profile was not set to explicitly deny the traffic.

It drops the traffic because the profile was not set to explicitly allow the traffic.

It uses the default action assigned to the virus signature.

It allows the traffic but generates an entry in the Threat logs.

NEW QUESTION 167
Drag and Drop Question
Arrange the correct order that the URL classifications are processed within the system.
Select and Place:

NEW QUESTION 168
Match the network device with the correct User-ID technology.

NEW QUESTION 169
Match the network device with the correct User-ID technology.

NEW QUESTION 170
Given the Cyber-Attack Lifecycle diagram, identify the stage in which the attacker can initiate malicious code against a targeted machine.

Exploitation

Installation

Reconnaissance

Act on Objective

NEW QUESTION 171
Which two App-ID applications will you need to allow in your Security policy to use facebook-chat? (Choose two.)

facebook

facebook-chat

facebook-base

facebook-email

NEW QUESTION 172
An administrator notices that protection is needed for traffic within the network due to malicious lateral movement activity. Based on the image shown, which traffic would the administrator need to monitor and block to mitigate the malicious activity?

branch office traffic

north-south traffic

perimeter traffic

east-west traffic

NEW QUESTION 173
An administrator needs to allow users to use their own office applications. How should the administrator configure the firewall to allow multiple applications in a dynamic environment?

Create an Application Filter and name it Office Programs, the filter it on the business-systems category, office-programs subcategory

Create an Application Group and add business-systems to it

Create an Application Filter and name it Office Programs, then filter it on the business-systems category

Create an Application Group and add Office 365, Evernote, Google Docs, and Libre Office

NEW QUESTION 174
An administrator would like to override the default deny action for a given application and instead would like to block the traffic and send the ICMP code “communication with the destination is administratively prohibited” Which security policy action causes this?

Drop

Drop, send ICMP Unreachable

Reset both

Reset server

NEW QUESTION 175
Which two features can be used to tag a user name so that it is included in a dynamic user group? (Choose two)

XML API

log forwarding auto-tagging

GlobalProtect agent

User-ID Windows-based agent

NEW QUESTION 176
You receive notification about new malware that is being used to attack hosts The malware exploits a software bug in a common application Which Security Profile detects and blocks access to this threat after you update the firewall’s threat signature database?

Data Filtering Profile applied to outbound Security policy rules

Antivirus Profile applied to outbound Security policy rules

Data Filtering Profile applied to inbound Security policy rules

Vulnerability Profile applied to inbound Security policy rules

NEW QUESTION 177
What are two differences between an implicit dependency and an explicit dependency in App-ID? (Choose two.)

An implicit dependency does not require the dependent application to be added in the security policy

An implicit dependency requires the dependent application to be added in the security policy

An explicit dependency does not require the dependent application to be added in the security policy

An explicit dependency requires the dependent application to be added in the security policy

NEW QUESTION 178
An administrator is updating Security policy to align with best practices.
Which Policy Optimizer feature is shown in the screenshot below?

Rules without App Controls

New App Viewer

Rule Usage

Unused Unused Apps

NEW QUESTION 179
At which stage of the cyber-attack lifecycle would the attacker attach an infected PDF file to an email?

delivery

command and control

explotation

reinsurance

installation

NEW QUESTION 180
An administrator would like to override the default deny action for a given application and instead would like to block the traffic and send the ICMP code “communication with the destination is administratively prohibited” Which security policy action causes this?

Drop

Drop, send ICMP Unreachable

Reset both

Reset server

NEW QUESTION 181
A server-admin in the USERS-zone requires SSH-access to all possible servers in all current and future Public Cloud environments. All other required connections have already been enabled between the USERS- and the OUTSIDE-zone. What configuration-changes should the Firewall-admin make?

Create a custom-service-object called SERVICE-SSH for destination-port-TCP-22. Create a security-rule between zone USERS and OUTSIDE to allow traffic from any source IP-address to any destination IP-address for SERVICE-SSH

Create a security-rule that allows traffic from zone USERS to OUTSIDE to allow traffic from any source IP-address to any destination IP-address for application SSH

In addition to option a, a custom-service-object called SERVICE-SSH-RETURN that contains source-port-TCP-22 should be created. A second security-rule is required that allows traffic from zone OUTSIDE to USERS for SERVICE-SSH-RETURN for any source-IP-address to any destination-Ip-address

In addition to option c, an additional rule from zone OUTSIDE to USERS for application SSH from any source-IP-address to any destination-IP-address is required to allow the return-traffic from the SSH-servers to reach the server-admin

NEW QUESTION 182
Based on the security policy rules shown, ssh will be allowed on which port?

80

53

22

23

NEW QUESTION 183
Which Security profile can you apply to protect against malware such as worms and Trojans?

data filtering

antivirus

vulnerability protection

anti-spyware

NEW QUESTION 184
Based on the show security policy rule would match all FTP traffic from the inside zone to the outside zone?

internal-inside-dmz

engress outside

inside-portal

intercone-default

NEW QUESTION 185
You have been tasked to configure access to a new web server located in the DMZ Based on the diagram what configuration changes are required in the NGFW virtual router to route traffic from the 10 1 1 0/24 network to 192 168 1 0/24?